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(57) Abstract: 

PURPOSE: To obtain a public key authentication protocol 
which can be efficiently executed at high speed with 
hardware of kinds currently used for a cellular 
telephone by giving a hash authentication string to a 
base station, when a mobile station unit enters- in the 
cell of the base station and giving a shared secret data 
field to the base station, when a center station judges 
it correct. 

CONSTITUTION: The mobile station unit transmits its 
area code MIN 2 and telephone number MIN 1 
designations to the base station and requests the base 
station to start the authentication process. A hashing 
function or a unidirectional function is used, in order 
to execute authentication process. MIN 1 designation and 
a secret key are installed, a cellular service area CGSA 
processor transmits a specified random sequence 
RANDSSD to the mobile station unit, and the generation 
of shared secret data SSD is indicated, so that the unit 
of a user is initialized. CGSA transmits RANDSSD and the 
generation of an SSD field, through the base station of 
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• #i^ar.-y b&AUTHBSXMJ^fcStlS 
U it-A'giffi^CMU hfcitfit- A 

SSD7^-;i/ F&^-f £ ri: £ 

[0 0 3 8] -9— A*Wcj:oT^£*im 

D, ESN, SSD-AfcJ:tt^&<£*j^<c>;!wDM 
n^tfgSS'J («S) (I27(DMIN3) Sr^gUfefe 
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&/vy i/ilSES/-^ yx *%Sfcti>tLMZW yf)\> 

zasmiz-fzfcmziz, w*%mmm im 
(D&oiz. iszibKRANDimo-^) nmmt>^ 

k muy- j ryxti'%m2tiz>^ mmimzam 

[0039] ®mmz--v bit w#j T*&&m&\z 

m-fabaMzm^. ir&t>%. -9— Am&mi*. 

mbm\ZttU RAND->-^>7. ESNfgfc MI 
N l*|5£&J;t>*S S D- A-V"774 -Jlb'frbfcl&ZIX 

td®m.y->ry**xm-$-z>^W$.-tz>o BSE*9Sf? 
ati-si:, mmnwm^mm^-v b<DV^\z\it. w. 

[0 0 4 0] ±fBWr^T©ig|iE{i, ISH^tlS^y 
[0 0 4 1] [fMfifc] 

wmi-t^ mm\zzfr*¥ji!*)\j&&\zmi&*z>^ 
•So #tc, i$mn^--v b^^rm^M<rM-}5\z^ 

X, RANDi/-^r>X, ESN8J:0!MIN lfi^, 

^?>mc s s d- Bit -7*7^ Kti^§ati^>>-/ 
vN/ya-fextciJi'DtiSo 

[0 0 4 2] i>»7'A7'nt^li2Klf7h5:M 
^AfiJ:CKB(C^ii(3!^lSo #S*M^--y tffr 

-^Atfmjj&jzm^t-t&t-Mzmmztu vk- 
7ni$AJi^is*Mffitz>t=.mz<mztiz>» mz, m 
mmxit. ?)\s-7Atf*j]^pzwm?z>t~tb\zw% 

fJv-^BtfftX&jZZwg^t-tzt-isbizmiZ 

fo 

[0043] m 

wma>$iW\zj:v. mmiz£-oTT>7T4zfT~&& 
tmvt>frr^z>3Mm^-vbt>\ m%iz, tv^-i 
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z<D&o&&m#.££*j\^ mmmizumtz (ra 

ndu) is-Ty^Zmm-tZ. &M%=l-v M*, R 
ANDUS/-- "r^X, hCDXUTn- KM 

IN2fi5£, ESNJiJg, MINlJft£feJ:lfSSD- 

5„ Wm\t. r©»j*Tf, ;vy SUISSE* h'J^tf 
[0 0 4 4] [f»)l-yt-JWfti/XfA] 10 

£(3£3£:*)*-&So 3*>S*§^«, WW^yfe-^ttlfiPf 
[0 0 4 5] iWHir^ vfe-S^UHbi'^A (CMC) 

( 1 ) J*«wg££"7*&s. 

(2) 8t^y hn>tfrL-^±T'^WlCg&#-r*o 

(3) Sa^KKT'feS. 

[0 0 4 6] CMCCDHf^tti, #W>«fc3lCbT TO 

2 5 6JU hOf^lJTBOX [z] 30 

1. 0^z<2 5 6<Z)«SH<0#zlC*rU TBOX 
[z] =zt&<„ 

2. K^TBOX [z] (SSD-B) & 
^>>>Ol<^ , a-feXlCi££= itlli. *Stfi9JC, (08 
T*tt2 5 B/U hT-l±fc< 2Ktfy hT&SZlil&l^ 
Ttt) H808SR3O 1, 3 0 2^3^0*3 0 3^3^1 
£&©T*&So 

[0 0 4 7] |fcW»mStlSfc, CMCjft flOW^V-fe 

*Hi't*i4: : bBllB"e*«. CMCWfcR/W h©°J^ 

[0 0 4 8] J6HT©SirflT»tt. iWffc^DtX (53 <fc D* 
A»7rrtK#ftU CMCIi ^•©7*-#A>y:7T© 50 
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li. H1O0DS8R5O 2fe«fcrjf5 0 4*«1^3©n— ®l/ 

[0049] cMCtt3o©asBW&«»a*&fcy. -e- 

(i) -0****, 0Si<d<8«ffl©i»C;JtU 
I . CMCffl^l mmiXkOM »J 

1. saSzfcotcfcSBffrtS. 

2 . 0 s i < d ©«5H©«<t- SffiRtt i C*f U 

a. ^&q£, q = z (+) (iari&Uh) 

fejsu ■(+) tttryhrt«>*wittSroRi*9iE?T? 

&So 

b. 3BRk«:, k = TBOX [q] t+S. 

c b (i) b (i) =b (i) +k mod 
2 5 6 fcSaWS. 

d. z&, z = b (i) +z mod 2 56 
[0 0 5 0] II. CMCtf)fl2ai5gtt. ^owayT 

&50 

1. 0^i< (d-1) /2<Z)®fS0D-r^T(D®Kffi 
UC*fU b (i) = b (i) # (b (d-l-i) O 
R 1) tt& 0 fefe'U (+) ttlfv hZThOOR 

in. cMc©*»apm±. 

1. ^z$:0(C«b1-2)„ 

2 . ogi<d ©igra^^s-r s^cffi i fcjtfu 

a. aasqS:, q=z (+) (i©m*>fh) 4;-r 
s„ 

b. S»k&, k = TBOX [q] fc-tS. 

c. z&, z = b (i) +z mod 2 56 £Jg 

d. b (i) b (i) =b (i) -k mod 

2 5 6 iiseBrrs. 

[0 0 5 1] jHRSIlfclWW^yfe-^fe^t^-df^ 
^y-fe - i>"«:Bir5t'fbfe< , :t)'«?M1-S fcfelc^MStiS Zlix 

<o3&m<z>7utxzmi otc^-To io©ms$ns 
Hf^basiu^siT^So e«^i/x^Ai±, s/x^a 

©m*Jb^H© S/X-rA©ffi*fC^SS:^S <fc e> (C^ 

i'^.-rAtCBB-fSZtvaiiOXi:^ W. Diffie and M. 
E. Hellraan, "Privacy and Authentication: An Introd 
uction to Cryptography" (^>(Ai/—t.^t : Bf# 
AP?) , Proc.of the I.E.E.E., Vol.67, No.3 (19 7 
9¥3£) $r#flio 

[0052] mmn^-v wi 
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^2004tt5. Kil^D»^2 0 0l4yDt»;»2 

1 OlCgg^StlS,, ^Qty*2 1 Ott, tcr 

[0053] :/p v 9 2 1 0 its flr^tfHSafStc BBS f 10 
SHHKOjft^&'&S^'D >v * 2 2 0 WK^Sti*. -f 
□ <y*2 0 0~2 2 0&, rSSRcD^ljl«|^S{Cj:oT 

xzmtt&t-ib* Ell i©3£gtt> yntyt2 l o 

-;i/2 3omtj. =E^a.-;i/2 3 o\t. mwrmsm 

[0 0 5 4] ^iya.-)VZ 3 Ote^^^l/TT'p-fey-tf- 

2 3 lfcJ:t>^n-fe^-9-2 3 1 JCftftt**V*< o^CO U 

fi. A^-CD^ ; E^n-;i/2 3 0F%(C#fef 

^e>t>*(CMINl^j;t)«MIN2fiS5: > rfXlvV 30 
2 4 0<DVi?X#XlZte<. =Ei*a-;i/2 3 OCDbS/X 

[0 0 5 5] ^fejERSnfeSSD^-f-TI/KS:^^-^ 

2 3 0 CD 1/ # izmti? 5 Z. t %»^tt"Tf £ ^ 

tc, -^a-fe^-9-2 3 lCD^n-kx^^fT-r-Sf-^c^ 

&ft^U^X#£=E£/'3.-;b2 3 0c7>Ui>"X#lC-g-#>£ 
Zli:t)^T'fe-2>„ Zltie>cT)^S: ; E^rL-;i/2 3 OtC 

4ifcJW:<5£»^:x.-y h («*.« r lJt$Bj 99ltm=L=- 40 

3 nt7°u-ty?2 l ofttc^f#-rsz:£#T*£6„ y 

[0056] ±mo)wmit^j^mmmi^»^taA 
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*•]« f<ftttt«:#*S 3 fcliEE«b^T*;fc£„ ZtUZteMZ. 
[0 0 5 7] 

ten] mfets&xmwm&<mi3G>*y-'exo)rc.to\z. 

fflmvm&itTjki-mx&z. 
m 2 ] * 7 4 -)v K©m«fc nr-tt©* 

[0 3 ] M*^«rm- v h «W*ItcS«fi»ic «koT 

£tt£i^^pi?x&^«-t?&.£>„ 
[04] «#Si^-*&fm-t*fe«)Kji*ga4VN'y 

[bis] fltasz-^^^STf^at-sfeftjcjass^vNy 

[06] «gPazyh««58fSt5|8»^ ^si»i>-^> 

mx$>z>„ 

[07] «PfS/— ?r>^&mft-t«fc«)tcJi|gS4v\y 

[08] imm=L-*> h\z&vz>=m*m^it&&-&fm 

[09] ^8iiE5/— ?T>^fef^W6fc«)Jca9gStWN 
5/3. $n^l^$:5tf0T'fe-5„ 
[010] y -fe - i^fe «fc t>*^*- ^ ^ >v 

?mx*&z. 

[01 1] ®Mm=L-v h©/\-Kfi7ffl^ovi'H 
[^©giW] 

10-14 £#88 

2 0-21 

2 2-2 3 ^t&M 

30-40 sa© 
101 i»>^;i/yp^^ 
200 v V 

210 ^p-fe^-y- 

22 0 jgff|^D>v^ 
2 3 0 

231 yp-fey-y- 

24 0 1/^X^yP^f 
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